[ubuntu/cosmic-proposed] systemd 238-5ubuntu1 (Accepted)

Dimitri John Ledkov xnox at ubuntu.com
Thu May 31 17:08:14 UTC 2018


systemd (238-5ubuntu1) cosmic; urgency=medium

  Merged from Debian Unstable, remaining changes are:

  * Set UseDomains to true, by default, on Ubuntu.
  * Enable systemd-resolved by default.
  * postinst: Create /etc/resolv.conf at postinst, pointing at the stub
    resolver.
  * postinst: drop empty/stock /etc/rc.local.
  * postinst: enable persistent journal.
  * Drop systemd.prerm safety check.
  * Ship systemd sysctl settings.
  * libnss-resolve: do not disable and stop systemd-resolved.
  * boot-smoke: refactor ADT test.
  * Fix test-functions failing with Ubuntu units.
  * units: set ConditionVirtualization=!private-users on journald audit socket.
  * units: drop resolvconf.conf drop-in, resolved integration moved to
    resolvconf package.
  * debian/tests: Switch to gdm3, enforce udev upgrade.
  * Ubuntu/extra: ship dhclient-enter hook.
  * Ignore failures to set Nice priority on services in containers.
  * tests: Do not use nested kvm during ADT tests.
  * systemd-fsckd: Fix ADT tests to work on s390x too.
  * Disable LLMNR and MulticastDNS by default.
  * Enable qemu tests on most architectures.
  * debian/tests/systemd-fsckd: update assertions expectations for v237.
  * test/test-fs-util: detect container, in addition to root.
  * test/test-functions: launch qemu-system with -vga none.
  * Blacklist TEST-16-EXTEND-TIMEOUT.
  * tests/boot-smoke: ignore udevd connection timeouts resolving colord group.
  * tests/systemd-fsckd: ignore systemd_fsck_with_plymouth_failure.
  * tests/control: ensure boot-smoke uses latest systemd & udev.
  * wait-online: do not wait, if no links are managed (neither configured, or
    failed).
  * journald.service: set Nice=-1 to dodge watchdog on soft lockups.
  * Workaround captive portals not responding to EDNS0 queries.
  * resolved: Listen on both TCP and UDP by default.
  * Recommend networkd-dispatcher
  * networkd: if RA was implicit, do not await ndisc_configured.
  * udev-udeb: ship modprobe.d snippet to force scsi_mod.scan=sync in d-i.
  * Skip starting systemd-remount-fs.service in containers.
  * Add "AssumedApparmorLabel=unconfined" to timedate1 dbus service file.

  * Apply systemd-stable/v238-stable patches.

  * Cherrypick feature to hibernate with disk offsets.

  * Remove dropped patches
  * Drop merged keyring patch
  * Drop write_persistent_net_s390x_virtio, as an LTS release was made.
  * Revert debian/tests/upstream to be more like Debian's.
  * Do not skip test-execute anymore, should be fixed on armhf now.

systemd (238-5) unstable; urgency=medium

  [ Evgeny Vereshchagin ]
  * upstream autopkgtest: Copy journal subdirectories.
    Otherwise logs are missing on failures.

  [ Martin Pitt ]
  * debian/tests/boot-and-services: Ignore cpi.service failure.
    This is apparently a regression in Ubuntu 18.04, not in systemd, so
    ignore it.

  [ Michael Biebl ]
  * sd-bus: Do not try to close already closed fd (Closes: #896781)
  * Use dh_missing to act on uninstalled files.
    The usage of dh_install --fail-missing has been deprecated.
  * meson: Avoid warning about comparison of bool and string.
    The result of this is undefined and will become a hard error in a future
    Meson release.
  * login: Respect --no-wall when cancelling a shutdown request
    (Closes: #897938)
  * Add dependencies of libsystemd-shared to Pre-Depends.
    This is necessary so systemctl is functional at all times during a
    dist-upgrade. (Closes: #897986)
  * Drop dh_strip override, the dbgsym migration is done

  [ Felipe Sateler ]
  * Don't include libmount.h in a header file.
    Kernel and glibc headers both use MS_* constants, but are not in sync, so
    only one of them can be used at a time. Thus, only import them where
    needed. Works around #898743.

systemd (238-4) unstable; urgency=medium

  [ Michael Biebl ]
  * udev/net-id: Fix check for address to keep interface names stable
  * debian/copyright: Move global wildcard section to the top

  [ Martin Pitt ]
  * Fix daemon reload failures

  [ Laurent Bigonville ]
  * Fix /sys/fs/cgroup mount when using SELinux.
    Since v236, all cgroups except /sys/fs/cgroup/systemd and
    /sys/fs/cgroup/unified are not mounted when SELinux is enabled (even in
    permissive mode). Disabling SELinux completely restores these cgroups.
    This patch fixes that issue by no longer making the assumption that those
    cgroups are mounted by initrd/dracut before systemd is started.

systemd (238-3) unstable; urgency=medium

  [ Martin Pitt ]
  * Enable systemd-sysusers unit and provide correct Debian static u/gids.
    Add a helper script debian/extra/make-sysusers-basic which generates a
    sysusers.d(5) file from Debian's static master passwd/group files.
    systemd 238 now supports  specifying different uid and gid and a
    non-default login shell, so this is possible now. (Closes: #888126)
  * udev README.Debian: Include initrd rebuild and some clarifications in
    migration.
    While initrd update is already being mentioned in the introductory
    section, it is easy to miss when going through the migration steps, so
    explicitly mention it again. Also add a warning about keeping a fallback
    on misconfigurations, and the possibility to migrate one interface at a
    time.
    Thanks to Karl O. Pinc for the suggestions! (Closes: #881769)

  [ Michael Biebl ]
  * basic/macros: Rename noreturn into _noreturn_.
    "noreturn" is reserved and can be used in other header files we include.
    (Closes: #893426)
  * units: Fix SuccessAction that belongs to [Unit] section not [Service]
    section (Closes: #893282)

systemd (238-2) unstable; urgency=medium

  [ Alf Gaida ]
  * core: do not free stack-allocated strings.
    Fixes a crash in systemd when the cpuacct cgroup controller is not
    available. (Closes: #892360)

systemd (238-1) unstable; urgency=medium

  [ Michael Biebl ]
  * New upstream version 238
    - Fixes systemd-tmpfiles to correctly handle symlinks present in
      non-terminal path components. (CVE-2018-6954, Closes: #890779)
  * Rebase patches
  * Use compat symlinks as provided by upstream.
    As the upstream build system now creates those symlinks for us, we no
    longer have to create them manually.
  * Update symbols file for libsystemd0
  * test-cgroup-util: bail out when running under a buildd environment

  [ Dimitri John Ledkov ]
  * systemd-sysv-install: Fix name initialisation.
    Only initialise NAME after --root optional argument has been parsed,
    otherwise NAME is initialized to e.g. `enable`, instead of to the
    `unit-name`, resulting in failures. (LP: #1752882)

systemd (237-4) unstable; urgency=medium

  [ Gunnar Hjalmarsson ]
  * Fix PO template creation.
    Cherry-pick upstream patches to build a correct systemd.pot including
    the polkit policy files even without policykit-1 being installed.
    (LP: #1707898)

  [ Michael Biebl ]
  * Drop mask for fuse SysV init script.
    The fuse package has removed its SysV init script a long time ago, so
    the mask is no longer needed.
  * Replace two Debian specific patches which cherry-picks from upstream
    master

Date: Wed, 30 May 2018 14:30:45 +0100
Changed-By: Dimitri John Ledkov <xnox at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/systemd/238-5ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 30 May 2018 14:30:45 +0100
Source: systemd
Binary: systemd systemd-sysv systemd-container systemd-journal-remote systemd-coredump systemd-tests libpam-systemd libnss-myhostname libnss-mymachines libnss-resolve libnss-systemd libsystemd0 libsystemd-dev udev libudev1 libudev-dev udev-udeb libudev1-udeb
Architecture: source
Version: 238-5ubuntu1
Distribution: cosmic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Dimitri John Ledkov <xnox at ubuntu.com>
Description:
 libnss-myhostname - nss module providing fallback resolution for the current hostname
 libnss-mymachines - nss module to resolve hostnames for local container instances
 libnss-resolve - nss module to resolve names via systemd-resolved
 libnss-systemd - nss module providing dynamic user and group name resolution
 libpam-systemd - system and service manager - PAM module
 libsystemd-dev - systemd utility library - development files
 libsystemd0 - systemd utility library
 libudev-dev - libudev development files
 libudev1   - libudev shared library
 libudev1-udeb - libudev shared library (udeb)
 systemd    - system and service manager
 systemd-container - systemd container/nspawn tools
 systemd-coredump - tools for storing and retrieving coredumps
 systemd-journal-remote - tools for sending and receiving remote journal logs
 systemd-sysv - system and service manager - SysV links
 systemd-tests - tests for systemd
 udev       - /dev/ and hotplug management daemon
 udev-udeb  - /dev/ and hotplug management daemon (udeb)
Closes: 881769 888126 890779 892360 893282 893426 896781 897938 897986
Launchpad-Bugs-Fixed: 1707898 1752882
Changes:
 systemd (238-5ubuntu1) cosmic; urgency=medium
 .
   Merged from Debian Unstable, remaining changes are:
 .
   * Set UseDomains to true, by default, on Ubuntu.
   * Enable systemd-resolved by default.
   * postinst: Create /etc/resolv.conf at postinst, pointing at the stub
     resolver.
   * postinst: drop empty/stock /etc/rc.local.
   * postinst: enable persistent journal.
   * Drop systemd.prerm safety check.
   * Ship systemd sysctl settings.
   * libnss-resolve: do not disable and stop systemd-resolved.
   * boot-smoke: refactor ADT test.
   * Fix test-functions failing with Ubuntu units.
   * units: set ConditionVirtualization=!private-users on journald audit socket.
   * units: drop resolvconf.conf drop-in, resolved integration moved to
     resolvconf package.
   * debian/tests: Switch to gdm3, enforce udev upgrade.
   * Ubuntu/extra: ship dhclient-enter hook.
   * Ignore failures to set Nice priority on services in containers.
   * tests: Do not use nested kvm during ADT tests.
   * systemd-fsckd: Fix ADT tests to work on s390x too.
   * Disable LLMNR and MulticastDNS by default.
   * Enable qemu tests on most architectures.
   * debian/tests/systemd-fsckd: update assertions expectations for v237.
   * test/test-fs-util: detect container, in addition to root.
   * test/test-functions: launch qemu-system with -vga none.
   * Blacklist TEST-16-EXTEND-TIMEOUT.
   * tests/boot-smoke: ignore udevd connection timeouts resolving colord group.
   * tests/systemd-fsckd: ignore systemd_fsck_with_plymouth_failure.
   * tests/control: ensure boot-smoke uses latest systemd & udev.
   * wait-online: do not wait, if no links are managed (neither configured, or
     failed).
   * journald.service: set Nice=-1 to dodge watchdog on soft lockups.
   * Workaround captive portals not responding to EDNS0 queries.
   * resolved: Listen on both TCP and UDP by default.
   * Recommend networkd-dispatcher
   * networkd: if RA was implicit, do not await ndisc_configured.
   * udev-udeb: ship modprobe.d snippet to force scsi_mod.scan=sync in d-i.
   * Skip starting systemd-remount-fs.service in containers.
   * Add "AssumedApparmorLabel=unconfined" to timedate1 dbus service file.
 .
   * Apply systemd-stable/v238-stable patches.
 .
   * Cherrypick feature to hibernate with disk offsets.
 .
   * Remove dropped patches
   * Drop merged keyring patch
   * Drop write_persistent_net_s390x_virtio, as an LTS release was made.
   * Revert debian/tests/upstream to be more like Debian's.
   * Do not skip test-execute anymore, should be fixed on armhf now.
 .
 systemd (238-5) unstable; urgency=medium
 .
   [ Evgeny Vereshchagin ]
   * upstream autopkgtest: Copy journal subdirectories.
     Otherwise logs are missing on failures.
 .
   [ Martin Pitt ]
   * debian/tests/boot-and-services: Ignore cpi.service failure.
     This is apparently a regression in Ubuntu 18.04, not in systemd, so
     ignore it.
 .
   [ Michael Biebl ]
   * sd-bus: Do not try to close already closed fd (Closes: #896781)
   * Use dh_missing to act on uninstalled files.
     The usage of dh_install --fail-missing has been deprecated.
   * meson: Avoid warning about comparison of bool and string.
     The result of this is undefined and will become a hard error in a future
     Meson release.
   * login: Respect --no-wall when cancelling a shutdown request
     (Closes: #897938)
   * Add dependencies of libsystemd-shared to Pre-Depends.
     This is necessary so systemctl is functional at all times during a
     dist-upgrade. (Closes: #897986)
   * Drop dh_strip override, the dbgsym migration is done
 .
   [ Felipe Sateler ]
   * Don't include libmount.h in a header file.
     Kernel and glibc headers both use MS_* constants, but are not in sync, so
     only one of them can be used at a time. Thus, only import them where
     needed. Works around #898743.
 .
 systemd (238-4) unstable; urgency=medium
 .
   [ Michael Biebl ]
   * udev/net-id: Fix check for address to keep interface names stable
   * debian/copyright: Move global wildcard section to the top
 .
   [ Martin Pitt ]
   * Fix daemon reload failures
 .
   [ Laurent Bigonville ]
   * Fix /sys/fs/cgroup mount when using SELinux.
     Since v236, all cgroups except /sys/fs/cgroup/systemd and
     /sys/fs/cgroup/unified are not mounted when SELinux is enabled (even in
     permissive mode). Disabling SELinux completely restores these cgroups.
     This patch fixes that issue by no longer making the assumption that those
     cgroups are mounted by initrd/dracut before systemd is started.
 .
 systemd (238-3) unstable; urgency=medium
 .
   [ Martin Pitt ]
   * Enable systemd-sysusers unit and provide correct Debian static u/gids.
     Add a helper script debian/extra/make-sysusers-basic which generates a
     sysusers.d(5) file from Debian's static master passwd/group files.
     systemd 238 now supports  specifying different uid and gid and a
     non-default login shell, so this is possible now. (Closes: #888126)
   * udev README.Debian: Include initrd rebuild and some clarifications in
     migration.
     While initrd update is already being mentioned in the introductory
     section, it is easy to miss when going through the migration steps, so
     explicitly mention it again. Also add a warning about keeping a fallback
     on misconfigurations, and the possibility to migrate one interface at a
     time.
     Thanks to Karl O. Pinc for the suggestions! (Closes: #881769)
 .
   [ Michael Biebl ]
   * basic/macros: Rename noreturn into _noreturn_.
     "noreturn" is reserved and can be used in other header files we include.
     (Closes: #893426)
   * units: Fix SuccessAction that belongs to [Unit] section not [Service]
     section (Closes: #893282)
 .
 systemd (238-2) unstable; urgency=medium
 .
   [ Alf Gaida ]
   * core: do not free stack-allocated strings.
     Fixes a crash in systemd when the cpuacct cgroup controller is not
     available. (Closes: #892360)
 .
 systemd (238-1) unstable; urgency=medium
 .
   [ Michael Biebl ]
   * New upstream version 238
     - Fixes systemd-tmpfiles to correctly handle symlinks present in
       non-terminal path components. (CVE-2018-6954, Closes: #890779)
   * Rebase patches
   * Use compat symlinks as provided by upstream.
     As the upstream build system now creates those symlinks for us, we no
     longer have to create them manually.
   * Update symbols file for libsystemd0
   * test-cgroup-util: bail out when running under a buildd environment
 .
   [ Dimitri John Ledkov ]
   * systemd-sysv-install: Fix name initialisation.
     Only initialise NAME after --root optional argument has been parsed,
     otherwise NAME is initialized to e.g. `enable`, instead of to the
     `unit-name`, resulting in failures. (LP: #1752882)
 .
 systemd (237-4) unstable; urgency=medium
 .
   [ Gunnar Hjalmarsson ]
   * Fix PO template creation.
     Cherry-pick upstream patches to build a correct systemd.pot including
     the polkit policy files even without policykit-1 being installed.
     (LP: #1707898)
 .
   [ Michael Biebl ]
   * Drop mask for fuse SysV init script.
     The fuse package has removed its SysV init script a long time ago, so
     the mask is no longer needed.
   * Replace two Debian specific patches which cherry-picks from upstream
     master
Checksums-Sha1:
 ede13bb32da9c1b2b5f75e24982c9ebdca162739 4623 systemd_238-5ubuntu1.dsc
 8179cc62c7f0cb1b61b7fa21e843197229535fe6 6954022 systemd_238.orig.tar.gz
 3961609dc3c027367e2a399082d15d83059cfeb9 225672 systemd_238-5ubuntu1.debian.tar.xz
 487ed0f5f41c5b8ee30629d1a065093a667e7553 11544 systemd_238-5ubuntu1_source.buildinfo
Checksums-Sha256:
 c58555e982ff7ad74b8654ed24dffa577e53d678c1d9c7cc15aa81ebf5d72540 4623 systemd_238-5ubuntu1.dsc
 bbc8599bab2e3c4273886dfab12464e488ecdaf20b8284949e50f8858de3e022 6954022 systemd_238.orig.tar.gz
 870ecf2897f59b74a794ac69c48a2642f3b80cfd9b49eaf9163f764d967e4542 225672 systemd_238-5ubuntu1.debian.tar.xz
 2cf07efc6fbafc1bbd243933afce8c7986671505be1010b66e5fd8402230e8f2 11544 systemd_238-5ubuntu1_source.buildinfo
Files:
 f8fe8da961967ccfc496d3d3ba44ea09 4623 admin optional systemd_238-5ubuntu1.dsc
 76db8004647283b779234364cd637d3c 6954022 admin optional systemd_238.orig.tar.gz
 1682a2b53da11339dd0efde99b0b8bab 225672 admin optional systemd_238-5ubuntu1.debian.tar.xz
 c6725d57105af05cfe3b8e62420ab369 11544 admin optional systemd_238-5ubuntu1_source.buildinfo
Original-Maintainer: Debian systemd Maintainers <pkg-systemd-maintainers at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----

iQFEBAEBCgAuFiEEdzyZ69ChEXIhenw/ysLYuc0spfkFAlsQGMMQHHhub3hAdWJ1
bnR1LmNvbQAKCRDKwti5zSyl+YvaB/9xSFzBTZ0BzxsHCXhJd1fUILHF9PN8i2QX
bRmmGo5ZnXdX8+d4Oga7o4Cv/5KCnspX0B4MFf2wb/XvmVJPZeJsyeh3arGSkf7c
Y68CaQGKH+EIpdKBYc81mxWtqDL86o+60CPEAoiKsoiHOyxyLPY6sOnkjZc7XzSW
SURbcJjNZAqbgqcccwhWnMP/CgnXte3VHfUx2vhlgWlRNs0Ck/QyxR09Dzn7E5Lx
9jW2xX82b21kAe6+EQ+LLCcoGfZFFyHpm/fh/mg/QmL2pSv9ZokAHr/iz5mD53j1
amY9LuSz+buoyFyA42r/VfY1b+T9jz3Gj6NKZeAtUegQxaoOG6Pw
=JrwQ
-----END PGP SIGNATURE-----


More information about the Cosmic-changes mailing list